4 ms·
Lots of dev tools do this with github, too. The idea of a web-wide sso is a bad one.
by mises 8y ago
Lots of dev tools do this with github, too. The idea of a web-wide sso is a bad one.
- AnIdiotOnTheNet 8y agoI don't think that's true, it's just never been implemented in a way that wasn't bad. You could, for instance, let people have a public key to identify themselves. Your browser or other client could automatically submit your chosen key for you (or expose a button for you to submit it), then there's a challenge and response, and you're logged in. Your account details are stored with the public key as the id.
- Ayesh 8y agoMy developer self loves this idea, knowing that my secret key doesn't even leave the computer. My traveler self hates the idea, because I can't read my emails from my friend's phone when my phone is broken during our 6 month trek.
- mises 8y agoMy security self hates this idea, because a single point of failure is not a good design. How would the key be revoked if lost? Replaced? This seems to necessitate a CA-type infrastructure (like TLS certs). Not something I'm comfortable trusting any corporation or government with.
- AnIdiotOnTheNet 8y agoIf the account is that important to your life, then there are probably other identifying information associated with it, credit card numbers, addresses, etc. Do what you do today when identities are stolen: contact the company, prove you are who you say you are, and the'll let you assign a new key to your profile. Otherwise, who cares? Gen a new key and get on with life.
- sowbug 8y agoChange public key to public key(s), add necessary design elements to stop MITM and replay attacks, and you have reinvented U2F.
- frosted-flakes 8y agoIn that case, I don't mind, since that dev tool probably has access to my GitHub account anyway. Like Netlify, which automatically re-deploys the site when the watched repo+branch is updated.